Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/_9vMQEQ24YI4qOG56vmlo8Iku-w.roa
File: _9vMQEQ24YI4qOG56vmlo8Iku-w.roa (raw, json)
Hash identifier: azU7z28ZHCvNx+/LRpvrxsRZPW5x+ZTMmTbwF6KNTZs=
Subject key identifier: FF:DB:CC:40:44:36:E1:82:38:A8:E1:B9:EA:F9:A5:A3:C2:24:BB:EC
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 018CC42549DABD40F6E7F78D1264FDABE9C5
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/_9vMQEQ24YI4qOG56vmlo8Iku-w.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60656
IP address blocks: 78.128.64.0/24 maxlen: 24
78.128.68.0/23 maxlen: 23
78.128.65.0/24 maxlen: 24
78.128.70.0/23 maxlen: 23
185.149.105.0/24 maxlen: 24
185.149.104.0/24 maxlen: 24
185.149.107.0/24 maxlen: 24
185.149.106.0/24 maxlen: 24
78.128.33.0/24 maxlen: 24
78.128.32.0/24 maxlen: 24
78.128.35.0/24 maxlen: 24
78.128.34.0/24 maxlen: 24
78.128.44.0/24 maxlen: 24
78.128.47.0/24 maxlen: 24
78.128.46.0/24 maxlen: 24
78.128.45.0/24 maxlen: 24
78.128.51.0/24 maxlen: 24
78.128.50.0/24 maxlen: 24
78.128.49.0/24 maxlen: 24
78.128.48.0/24 maxlen: 24
130.185.252.0/24 maxlen: 24
79.124.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:49:da:bd:40:f6:e7:f7:8d:12:64:fd:ab:e9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffdbcc404436e18238a8e1b9eaf9a5a3c224bbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:2c:50:42:bd:01:45:39:bf:d3:d1:49:dc:
b2:aa:be:a5:5e:f0:58:de:0c:78:66:f4:96:43:83:
4e:aa:42:ea:c5:f4:7c:03:d5:da:4e:2a:65:3d:cd:
d8:5c:c2:59:28:24:d2:9a:3b:63:c7:53:84:6f:67:
95:d8:18:61:cd:9d:71:b4:b1:5d:e1:c5:e2:12:19:
9d:0d:4f:f2:aa:81:a3:86:a9:65:fd:71:33:71:f5:
23:45:25:93:59:f7:82:88:68:43:ee:a9:87:6f:1c:
2b:7d:0e:ef:e8:45:e5:50:e7:2b:05:16:bc:16:09:
5c:0f:17:c6:7f:5f:02:ac:ae:0c:55:88:45:75:53:
83:ce:21:fa:36:68:f1:9c:35:09:5f:fb:5b:3a:30:
14:d4:e7:9c:e0:35:06:51:88:69:9c:12:3c:bb:9e:
78:cb:d3:d1:01:cf:92:b3:d6:5b:32:e4:0d:a7:27:
84:52:bc:41:d3:c9:82:bd:e5:05:e7:fc:ce:60:6f:
d3:e2:9e:cf:58:5b:c6:c7:4d:6b:f2:88:8c:bf:c3:
13:4d:c1:a3:57:1f:99:a7:87:3c:5d:ec:28:24:40:
ff:03:ad:68:98:40:76:41:f2:66:3b:ac:d6:44:8f:
3a:02:7f:f7:10:29:8e:c5:0c:fe:88:15:26:70:8d:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DB:CC:40:44:36:E1:82:38:A8:E1:B9:EA:F9:A5:A3:C2:24:BB:EC
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/_9vMQEQ24YI4qOG56vmlo8Iku-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.32.0/22
78.128.44.0-78.128.51.255
78.128.64.0/23
78.128.68.0/22
79.124.85.0/24
130.185.252.0/24
185.149.104.0/22
Signature Algorithm: sha256WithRSAEncryption
41:db:2b:f8:be:f5:a9:74:b9:59:8b:17:8a:85:be:fc:fc:ca:
5d:1f:20:50:05:14:12:bd:98:6e:15:ae:d0:3b:3d:16:19:af:
b1:be:d5:9c:2d:d9:72:7c:cb:0d:56:09:df:e3:70:4f:93:b2:
b0:fc:e5:c9:0f:87:c4:8a:94:13:54:81:a6:2a:e2:63:b1:5c:
0b:cd:0a:06:60:c1:7e:e2:29:db:20:23:a1:c3:75:cd:db:2c:
77:e4:83:96:bc:87:60:98:17:c7:fc:90:f6:ef:8e:e5:cc:69:
5b:d2:3a:3b:9d:56:0c:d7:bb:a6:3c:03:22:4e:5f:b3:f5:5d:
bc:af:6d:9e:c1:6e:f4:ec:3c:9b:87:ab:12:01:90:95:e9:9f:
e4:4e:bb:e6:ce:55:51:a9:c0:a3:ab:65:4a:5c:aa:d1:de:04:
d9:3c:c3:32:0d:1f:3a:e3:82:79:62:91:39:16:84:35:3e:5e:
24:5a:0d:2b:52:aa:12:81:4f:6e:27:e5:96:8c:bb:dd:44:10:
70:0c:f1:58:9c:b3:80:94:a5:49:95:c0:97:57:a3:4a:55:a0:
7e:cc:89:26:18:42:0d:ec:52:51:ea:aa:5c:87:64:0c:2c:0d:
6d:50:ae:94:41:a2:5c:aa:11:2c:93:ff:27:7f:86:4e:ee:7d:
c6:90:f4:69
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYzEJUnavUD25/eNEmT9q+nFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDk3Mjk1NmJkZmY4M2IwZDg4MWUwMWFmZDNkNmM1MjY1
MWUwNGIwHhcNMjQwMTAxMDgzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmRiY2M0MDQ0MzZlMTgyMzhhOGUxYjllYWY5YTVhM2MyMjRiYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGUsUEK9AUU5v9PRSdyyqr6lXvBY
3gx4ZvSWQ4NOqkLqxfR8A9XaTiplPc3YXMJZKCTSmjtjx1OEb2eV2BhhzZ1xtLFd
4cXiEhmdDU/yqoGjhqll/XEzcfUjRSWTWfeCiGhD7qmHbxwrfQ7v6EXlUOcrBRa8
FglcDxfGf18CrK4MVYhFdVODziH6NmjxnDUJX/tbOjAU1Oec4DUGUYhpnBI8u554
y9PRAc+Ss9ZbMuQNpyeEUrxB08mCveUF5/zOYG/T4p7PWFvGx01r8oiMv8MTTcGj
Vx+Zp4c8XewoJED/A61omEB2QfJmO6zWRI86An/3ECmOxQz+iBUmcI0ZlwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFP/bzEBENuGCOKjhuer5paPCJLvsMB8GA1UdIwQY
MBaAFFNJcpVr3/g7DYgeAa/T1sUmUeBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBseWxXdmYtRHNOaUI0QnI5UFd4U1pSNEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80YzA0MTMtY2U4MS00ZGM4LThhNGQt
YTcwZWVlM2RiNWU1LzEvXzl2TVFFUTI0WUk0cU9HNTZ2bWxvOElrdS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80YzA0MTMtY2U4MS00ZGM4LThhNGQtYTcwZWVlM2RiNWU1
LzEvVTBseWxXdmYtRHNOaUI0QnI5UFd4U1pSNEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQCToAgMAwD
BAJOgCwDBAJOgDADBAFOgEADBAJOgEQDBABPfFUDBACCufwDBAK5lWgwDQYJKoZI
hvcNAQELBQADggEBAEHbK/i+9al0uVmLF4qFvvz8yl0fIFAFFBK9mG4VrtA7PRYZ
r7G+1Zwt2XJ8yw1WCd/jcE+TsrD85ckPh8SKlBNUgaYq4mOxXAvNCgZgwX7iKdsg
I6HDdc3bLHfkg5a8h2CYF8f8kPbvjuXMaVvSOjudVgzXu6Y8AyJOX7P1XbyvbZ7B
bvTsPJuHqxIBkJXpn+ROu+bOVVGpwKOrZUpcqtHeBNk8wzINHzrjgnlikTkWhDU+
XiRaDStSqhKBT24n5ZaMu91EEHAM8Vics4CUpUmVwJdXo0pVoH7MiSYYQg3sUlHq
qlyHZAwsDW1QrpRBolyqESyT/yd/hk7ufcaQ9Gk=
-----END CERTIFICATE-----
Generated at Mon Jun 24 09:44:41 2024 by rpki-client on console-fra.rpki-client.org